This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/huX-aAp7poP1N4BK_O1qBgSqsAM.roa File: huX-aAp7poP1N4BK_O1qBgSqsAM.roa (raw, json) Hash identifier: wBAGxYQuk3ytNxx6AIHeKpBoGp2YVEpBaLY1haK3c0Y= Subject key identifier: 86:E5:FE:68:0A:7B:A6:83:F5:37:80:4A:FC:ED:6A:06:04:AA:B0:03 Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5 Certificate serial: 019B7B36B1B41B55812544A5568FFE3B5590 Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/huX-aAp7poP1N4BK_O1qBgSqsAM.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205192 IP address blocks: 185.241.138.0/24 maxlen: 24 185.241.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b1:b4:1b:55:81:25:44:a5:56:8f:fe:3b:55:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86e5fe680a7ba683f537804afced6a0604aab003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:59:2c:58:56:c2:30:5f:5e:97:32:71:83:34: 4a:cb:2b:c9:71:0b:de:42:84:99:d1:17:de:e0:85: 58:f9:91:ff:57:8d:e6:ad:b6:af:e1:27:f5:e7:af: af:80:62:6f:77:0f:4b:73:12:f8:1b:93:b7:8c:48: 51:19:79:5e:58:81:90:dc:75:87:7b:c0:95:95:51: 9c:d6:5e:f3:70:90:b9:9a:68:b2:df:9a:fb:7f:35: 44:c3:23:17:5a:35:d1:e1:bf:ef:06:02:32:05:0e: 27:ba:c7:da:99:ff:37:e6:74:3b:20:ff:8e:ba:44: 36:a3:0a:b6:78:91:0c:0a:7b:14:b1:c3:c9:b8:50: 79:72:ea:db:3f:52:80:e7:b5:2b:2a:39:64:76:f0: 2a:19:ad:56:6b:6f:df:56:3c:61:02:e1:42:ab:11: 70:8e:76:ef:01:77:9b:7b:c4:ad:ab:03:18:ee:40: d2:d8:5c:10:5b:86:82:7d:89:2b:c9:73:2a:95:1f: ac:00:8f:fa:de:d5:b0:af:cf:55:3c:5b:3d:da:b4: df:18:11:b8:c6:e3:e3:bd:f7:f1:88:8a:55:f6:29: ff:30:53:7b:9a:31:ec:1c:98:00:23:43:68:23:fb: bd:ae:2b:de:78:4f:8f:10:60:28:2d:14:da:a8:0b: d2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E5:FE:68:0A:7B:A6:83:F5:37:80:4A:FC:ED:6A:06:04:AA:B0:03 X509v3 Authority Key Identifier: keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/huX-aAp7poP1N4BK_O1qBgSqsAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.138.0/23 Signature Algorithm: sha256WithRSAEncryption 46:00:ad:2c:1c:2a:07:2d:0b:dd:98:88:ee:a9:60:19:ca:2a: 10:e4:a9:74:0c:f1:3e:e0:69:08:4f:dd:76:6a:c6:23:43:f7: a3:dc:5a:90:7a:6f:d3:8b:1c:c4:8a:c4:9a:51:49:30:a0:80: f2:de:d0:2c:ee:af:0d:d4:bc:bf:a8:88:4c:6d:ab:a4:c2:94: 14:22:a8:1c:1c:70:e6:d2:bb:be:51:9f:84:3a:5d:1a:a5:6e: 5b:c4:bf:8d:1a:61:b7:c2:dd:4b:68:58:37:78:e1:a9:db:eb: 97:fe:2f:52:c6:2b:e5:0c:d2:89:c9:f8:67:c0:e4:e3:3c:b7: 96:ee:5d:69:af:43:3d:e3:14:4f:69:fd:fe:0c:a8:98:78:fe: 48:5e:ed:07:3c:7f:ad:e2:2e:59:81:df:70:bb:69:fc:be:49: 2f:3a:44:a8:d2:a8:9c:28:46:b4:c8:44:50:05:97:e1:bd:96: ed:4a:19:c2:e8:08:d2:4d:4d:8b:74:fe:b2:35:7c:de:53:77: fb:7d:fa:2b:3b:8e:8b:34:58:f1:c1:38:1f:83:f7:3e:97:3c: c0:50:e9:96:46:d8:0f:1c:57:6c:90:04:61:71:7d:5b:df:d3: 3e:41:29:7c:59:4b:ec:c5:b8:fb:df:12:60:35:8c:23:8f:b7: e1:03:ba:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrG0G1WBJUSlVo/+O1WQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTIxNjFkN2YwMWZhNmZkMDg0MmMyMTEwODA2MzNmM2Vk MzZiYTUwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmU1ZmU2ODBhN2JhNjgzZjUzNzgwNGFmY2VkNmEwNjA0YWFiMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FksWFbCMF9elzJxgzRKyyvJcQve QoSZ0Rfe4IVY+ZH/V43mrbav4Sf156+vgGJvdw9LcxL4G5O3jEhRGXleWIGQ3HWH e8CVlVGc1l7zcJC5mmiy35r7fzVEwyMXWjXR4b/vBgIyBQ4nusfamf835nQ7IP+O ukQ2owq2eJEMCnsUscPJuFB5curbP1KA57UrKjlkdvAqGa1Wa2/fVjxhAuFCqxFw jnbvAXebe8StqwMY7kDS2FwQW4aCfYkryXMqlR+sAI/63tWwr89VPFs92rTfGBG4 xuPjvffxiIpV9in/MFN7mjHsHJgAI0NoI/u9riveeE+PEGAoLRTaqAvSyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIbl/mgKe6aD9TeASvztagYEqrADMB8GA1UdIwQY MBaAFKPiFh1/Afpv0IQsIRCAYz8+02ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEt N2UwMzQwZWM5NjY3LzEvaHVYLWFBcDdwb1AxTjRCS19PMXFCZ1Nxc0FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEtN2UwMzQwZWM5NjY3 LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufGKMA0G CSqGSIb3DQEBCwUAA4IBAQBGAK0sHCoHLQvdmIjuqWAZyioQ5Kl0DPE+4GkIT912 asYjQ/ej3FqQem/TixzEisSaUUkwoIDy3tAs7q8N1Ly/qIhMbaukwpQUIqgcHHDm 0ru+UZ+EOl0apW5bxL+NGmG3wt1LaFg3eOGp2+uX/i9SxivlDNKJyfhnwOTjPLeW 7l1pr0M94xRPaf3+DKiYeP5IXu0HPH+t4i5Zgd9wu2n8vkkvOkSo0qicKEa0yERQ BZfhvZbtShnC6AjSTU2LdP6yNXzeU3f7fforO46LNFjxwTgfg/c+lzzAUOmWRtgP HFdskARhcX1b39M+QSl8WUvsxbj73xJgNYwjj7fhA7oq -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:56 2026 by rpki-client